Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/pcNuSsXSUBPDXR8jC1rykPbd_Mw.roa
File: pcNuSsXSUBPDXR8jC1rykPbd_Mw.roa (raw, json)
Hash identifier: KHCNcO4QoG/bE7ezBpOikaGv05WdqR8PqqSP9A59VaE=
Subject key identifier: A5:C3:6E:4A:C5:D2:50:13:C3:5D:1F:23:0B:5A:F2:90:F6:DD:FC:CC
Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial: 0CCA
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/pcNuSsXSUBPDXR8jC1rykPbd_Mw.roa
Signing time: Mon 15 Jan 2024 21:11:12 +0000
ROA not before: Mon 15 Jan 2024 21:11:12 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 17709
IP address blocks: 210.203.0.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3274 (0xcca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Validity
Not Before: Jan 15 21:11:12 2024 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=A5C36E4AC5D25013C35D1F230B5AF290F6DDFCCC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:97:11:db:e0:d8:e7:aa:06:ed:ad:c0:ef:81:
d6:7c:ca:a2:35:29:75:94:27:80:6b:7f:b6:ff:3c:
bf:5f:80:2a:65:0f:c9:94:ea:87:ac:e2:79:f2:8c:
d0:ee:29:55:c6:4a:df:c0:0c:b0:2a:5e:e8:de:9f:
99:e0:93:b7:3c:7e:72:2f:03:16:4b:48:bb:85:fd:
3e:48:b2:2b:b6:50:fa:6d:ee:14:36:a0:35:1a:e2:
e1:64:b2:fd:48:4d:8d:d8:c7:b6:35:e4:40:50:1c:
99:97:4f:08:8d:02:73:b9:31:7c:d6:97:24:04:c1:
c2:ac:20:25:a7:ac:e9:dd:24:49:2d:b6:85:b9:93:
17:fc:07:af:9b:ec:b6:05:37:91:24:63:70:6c:39:
fc:66:09:7a:fa:d5:51:2a:e7:dd:8e:fe:fb:40:70:
d6:45:99:bd:3f:55:11:eb:58:71:ad:15:b8:85:a5:
48:79:b2:43:d7:26:ed:ac:19:44:c6:a3:69:9d:8e:
4a:12:ca:26:04:af:b3:b4:ec:98:0a:74:1c:b1:4e:
21:ac:48:58:d5:d5:ff:8e:ce:41:af:db:f6:74:69:
cb:86:6b:48:1a:d6:33:bd:e8:5b:99:f2:84:4e:8d:
20:85:e9:41:4d:ff:3b:4c:57:50:dd:13:c0:ab:e6:
5b:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:C3:6E:4A:C5:D2:50:13:C3:5D:1F:23:0B:5A:F2:90:F6:DD:FC:CC
X509v3 Authority Key Identifier:
keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/pcNuSsXSUBPDXR8jC1rykPbd_Mw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.203.0.0/17
Signature Algorithm: sha256WithRSAEncryption
a4:be:74:53:1d:cd:8f:2f:f6:24:4c:c2:52:5d:b2:2b:c0:5e:
e8:5d:d3:44:1f:7b:a2:ef:12:d9:32:5c:a0:e7:00:4a:53:80:
f2:1c:3d:c3:17:40:1a:38:f8:b2:53:6a:39:3d:0f:1f:a3:21:
26:37:6b:82:dd:b3:fc:a6:ac:c2:7c:ee:98:90:0f:e9:38:16:
fd:24:a6:5f:04:6d:36:bd:7a:2d:d6:61:f5:8a:ce:67:54:31:
1d:3d:a7:bd:61:3a:f2:49:88:af:e4:de:f8:f5:f5:4b:82:46:
9b:e3:c2:2e:63:c5:ec:35:57:e1:6f:6b:35:41:b1:a5:b1:ff:
09:0b:61:61:21:db:6c:25:da:f7:fd:1a:4c:00:c8:3c:bc:2d:
94:3c:73:21:78:28:dc:00:7c:4e:03:d3:bd:b5:d6:82:54:1e:
91:cd:60:e1:74:67:c4:bd:1b:cc:db:74:02:44:84:7c:5a:48:
80:45:ee:01:77:50:f7:62:b7:a1:53:96:85:d7:ae:39:cb:2b:
9e:45:36:5d:90:e3:d0:b2:f7:d7:cf:bc:26:8a:c8:fe:86:a4:
1a:d1:e4:b7:83:a1:3b:61:fd:6c:d1:7d:79:f0:c0:8f:0d:80:
5e:87:29:52:79:be:b3:0b:f1:db:99:d9:88:12:ce:f6:d7:73:
b9:3a:78:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:19 2024 by rpki-client on console-fra.rpki-client.org